Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/91cdfd-2c72-4236-a4c2-2b8f7346f350/1/2r0RVWDYwrAky_EBFNocrP1Orso.roa
File: 2r0RVWDYwrAky_EBFNocrP1Orso.roa (raw, json)
Hash identifier: 03OdcPmwCc2pn6Q2ETr7PGvOwjdWATEEpq/X3ap3Qjs=
Subject key identifier: DA:BD:11:55:60:D8:C2:B0:24:CB:F1:01:14:DA:1C:AC:FD:4E:AE:CA
Certificate issuer: /CN=2fe5b7ccb403d30a44857d47c58cf1346546d283
Certificate serial: 01941FFA0335485C6959C94C6D25A37DF3E8
Authority key identifier: 2F:E5:B7:CC:B4:03:D3:0A:44:85:7D:47:C5:8C:F1:34:65:46:D2:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L-W3zLQD0wpEhX1HxYzxNGVG0oM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/91cdfd-2c72-4236-a4c2-2b8f7346f350/1/2r0RVWDYwrAky_EBFNocrP1Orso.roa
Signing time: Wed 01 Jan 2025 03:47:46 +0000
ROA not before: Wed 01 Jan 2025 03:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34984
IP address blocks: 159.253.80.0/24 maxlen: 24
159.253.81.0/24 maxlen: 24
159.253.82.0/24 maxlen: 24
159.253.83.0/24 maxlen: 24
159.253.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/91cdfd-2c72-4236-a4c2-2b8f7346f350/1/L-W3zLQD0wpEhX1HxYzxNGVG0oM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/91cdfd-2c72-4236-a4c2-2b8f7346f350/1/L-W3zLQD0wpEhX1HxYzxNGVG0oM.mft
rsync://rpki.ripe.net/repository/DEFAULT/L-W3zLQD0wpEhX1HxYzxNGVG0oM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 15:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:03:35:48:5c:69:59:c9:4c:6d:25:a3:7d:f3:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fe5b7ccb403d30a44857d47c58cf1346546d283
Validity
Not Before: Jan 1 03:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dabd115560d8c2b024cbf10114da1cacfd4eaeca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:62:f9:a0:99:6e:2b:87:00:ba:d3:27:be:66:
96:f7:80:25:db:2c:f9:1d:8e:4b:62:7a:3d:e2:21:
10:f8:e1:5b:dc:fe:9a:2a:0b:c9:7a:e0:ff:7c:f2:
31:ea:98:ec:96:4d:f8:4c:2f:a4:eb:07:f5:81:41:
8d:85:35:ee:d3:a3:cb:50:cd:ab:e0:e8:ed:cd:c8:
df:af:45:6a:3b:fa:2a:6f:0a:ef:cb:ea:30:e6:67:
e2:d1:93:10:89:3a:27:57:20:1c:9c:99:29:75:3b:
35:d9:98:f1:02:1b:19:e4:d7:d7:8e:44:73:e6:f8:
c3:a2:01:2a:e0:eb:49:b1:ac:0a:28:b7:1e:37:0f:
26:d5:84:8c:d8:a9:59:66:9f:29:4b:7e:d7:4a:ec:
cf:5d:a6:b6:29:5b:32:29:c8:80:99:42:69:fc:54:
92:cd:ff:a2:77:3d:2f:27:25:f8:5a:86:78:4c:be:
80:0d:dc:ba:68:94:58:33:0b:97:b7:16:1b:f3:4e:
6f:97:60:e7:e5:b1:31:ef:3b:ad:4f:61:5f:5f:09:
8b:c0:65:26:ad:92:c3:89:0d:d1:2c:a4:7e:26:76:
bb:1b:e1:af:57:ad:cc:d7:b0:40:70:bc:71:5b:03:
05:97:f2:41:45:67:18:e6:94:f8:ce:b7:a5:15:29:
29:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:BD:11:55:60:D8:C2:B0:24:CB:F1:01:14:DA:1C:AC:FD:4E:AE:CA
X509v3 Authority Key Identifier:
keyid:2F:E5:B7:CC:B4:03:D3:0A:44:85:7D:47:C5:8C:F1:34:65:46:D2:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L-W3zLQD0wpEhX1HxYzxNGVG0oM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91cdfd-2c72-4236-a4c2-2b8f7346f350/1/2r0RVWDYwrAky_EBFNocrP1Orso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91cdfd-2c72-4236-a4c2-2b8f7346f350/1/L-W3zLQD0wpEhX1HxYzxNGVG0oM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.253.80.0-159.253.84.255
Signature Algorithm: sha256WithRSAEncryption
3f:dd:8d:0c:d5:82:45:68:9a:67:2e:f3:b4:f1:5d:aa:b9:ea:
31:77:09:ae:ff:51:88:66:23:a4:f2:c8:1a:d4:23:6d:3d:01:
bd:8a:a4:cf:0a:b7:27:79:2d:8c:7b:8e:71:be:66:db:f6:d0:
ed:b3:00:28:2c:ef:cf:ca:fc:8b:09:e2:58:16:74:b9:c2:ed:
69:41:0d:8a:e7:b0:98:87:62:f1:ef:46:8e:5a:6f:9d:47:b1:
7b:f0:af:c6:35:df:c6:18:9c:69:93:62:ba:98:e0:25:00:59:
f1:a3:e4:7a:37:82:52:8d:d7:c3:87:7d:17:a1:3f:ef:0f:e8:
86:40:0c:8b:0c:bb:e6:a1:57:2f:45:4b:ec:b4:c6:fb:8b:bf:
e8:cb:dc:6f:5b:71:c0:dc:0e:1c:c7:25:82:cb:66:e1:e4:85:
e4:99:72:03:91:a8:2c:c5:c7:37:32:d9:fb:df:a8:ef:1a:fe:
09:c0:01:73:f1:dd:6f:56:b9:02:a6:d0:11:db:69:d9:1f:c2:
d1:ec:fd:d1:1e:52:7e:17:db:51:a8:c0:2c:83:5b:a2:c3:8a:
a6:a7:41:bb:3d:bf:35:b1:3b:bf:ba:e4:83:65:d8:3d:b8:be:
82:b6:48:cc:cd:58:61:22:a7:ce:e3:01:3d:3a:fa:40:29:6f:
33:e1:5a:b4
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQf+gM1SFxpWclMbSWjffPoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmZTViN2NjYjQwM2QzMGE0NDg1N2Q0N2M1OGNmMTM0NjU0
NmQyODMwHhcNMjUwMTAxMDM0NzQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYWJkMTE1NTYwZDhjMmIwMjRjYmYxMDExNGRhMWNhY2ZkNGVhZWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWL5oJluK4cAutMnvmaW94Al2yz5
HY5LYno94iEQ+OFb3P6aKgvJeuD/fPIx6pjslk34TC+k6wf1gUGNhTXu06PLUM2r
4Ojtzcjfr0VqO/oqbwrvy+ow5mfi0ZMQiTonVyAcnJkpdTs12ZjxAhsZ5NfXjkRz
5vjDogEq4OtJsawKKLceNw8m1YSM2KlZZp8pS37XSuzPXaa2KVsyKciAmUJp/FSS
zf+idz0vJyX4WoZ4TL6ADdy6aJRYMwuXtxYb805vl2Dn5bEx7zutT2FfXwmLwGUm
rZLDiQ3RLKR+Jna7G+GvV63M17BAcLxxWwMFl/JBRWcY5pT4zrelFSkprwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFNq9EVVg2MKwJMvxARTaHKz9Tq7KMB8GA1UdIwQY
MBaAFC/lt8y0A9MKRIV9R8WM8TRlRtKDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTC1XM3pMUUQwd3BFaFgxSHhZenhOR1ZHMG9NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi85MWNkZmQtMmM3Mi00MjM2LWE0YzIt
MmI4ZjczNDZmMzUwLzEvMnIwUlZXRFl3ckFreV9FQkZOb2NyUDFPcnNvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi85MWNkZmQtMmM3Mi00MjM2LWE0YzItMmI4ZjczNDZmMzUw
LzEvTC1XM3pMUUQwd3BFaFgxSHhZenhOR1ZHMG9NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBASf/VAD
BACf/VQwDQYJKoZIhvcNAQELBQADggEBAD/djQzVgkVommcu87TxXaq56jF3Ca7/
UYhmI6TyyBrUI209Ab2KpM8Ktyd5LYx7jnG+Ztv20O2zACgs78/K/IsJ4lgWdLnC
7WlBDYrnsJiHYvHvRo5ab51HsXvwr8Y138YYnGmTYrqY4CUAWfGj5Ho3glKN18OH
fRehP+8P6IZADIsMu+ahVy9FS+y0xvuLv+jL3G9bccDcDhzHJYLLZuHkheSZcgOR
qCzFxzcy2fvfqO8a/gnAAXPx3W9WuQKm0BHbadkfwtHs/dEeUn4X21GowCyDW6LD
iqanQbs9vzWxO7+65INl2D24voK2SMzNWGEip87jAT06+kApbzPhWrQ=
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:21:32 2025 by rpki-client